Steps to take to make sftp into MBL as secure as possible

You might also want to disable root access.

Common names (root, admin etc) are easy targets for brute force attacks.

Is someone wants to get access, they can do a port scanning and find the port.

But then they have to guess a user name.